AZ104-Q: revoke issued SAS tokens centrally
A team issues service SAS tokens and needs to revoke them before expiry without rotating storage keys. What should it use?
- A) A longer SAS expiry.
- B) A stored access policy referenced by the SAS, then change or delete that policy. ✓
- C) A resource lock.
- D) A public container. Answer: B. A stored access policy provides a server-side control point for associated service SAS tokens. Why not the others: The other choices cannot centrally revoke a valid SAS.